microsoft fixes critical word bug exploited in banking trojan scams